JustEnoughSkins

Added

• Added URL allowlist settings for original skin URLs that require re-signing:
  • AllowedSchemes: allowed URL schemes, defaults to ["https"]
  • AllowedDomains: allowed URL domains, defaults to []
• When a texture is unsigned or has an invalid signature and needs to be re-signed through MineSkin, the plugin now checks that the original URL matches both the allowed scheme and domain.
• Added Chinese and English README documentation for the URL allowlist behavior and configuration.

Changed

• Textures with valid Mojang signatures are still accepted directly and are not affected by the URL allowlist.
• Unsigned or invalid external skin URLs outside the allowlist are rejected. They will not be downloaded or submitted to MineSkin.
• Bumped the version from 1.0 to 1.1.

Fixed

• Signature validation now handles missing signatures, invalid Base64 signatures, and invalid URLs more safely to avoid interrupting the profile handling flow.